Lucene search
RedHatRHSA-2023:6180HistoryOct 30, 2023 - 12:51 p.m.
(RHSA-2023:6180) Important: Red Hat OpenShift distributed tracing 2.9.0 containers security update
2023-10-3012:51:55
access.redhat.com
14
red hat
openshift
distributed tracing
security update
browserify-sign
upper bound check
cve-2023-46234
containers
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
35.1%
Release of Red Hat OpenShift distributed tracing provides these changes:
Security Fix(es):
- browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack (CVE-2023-46234)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
github
github
debiancve
debiancve
CVE-2023-46234
2023-10-26 15:15:09
CVE-2023-40217
2023-08-25 01:15:09
osv
osv
CVE-2023-46234
2023-10-26 15:15:09
node-browserify-sign vulnerability
2024-05-30 10:12:04
ubuntu
ubuntu
browserify-sign vulnerability
2024-05-30 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-46234 affecting package reaper for versions less than 3.1.1-9
2024-06-06 19:53:22
CVE-2023-40217 affecting package python3 for versions less than 3.9.19-1
2024-03-29 17:23:41
redhatcve
redhatcve
CVE-2023-46234
2023-10-27 06:27:16
CVE-2023-40217
2023-08-30 21:12:08
nessus
nessus
RHEL 6 : browserify-sign (Unpatched Vulnerability)
2024-05-11 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : browserify-sign vulnerability (USN-6800-1)
2024-05-30 00:00:00
Debian DLA-3635-1 : node-browserify-sign - LTS security update
2023-10-29 00:00:00
cvelist
cvelist
CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
2023-10-26 14:31:35
CVE-2023-40217
2023-08-25 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6800-1)
2024-05-30 00:00:00
Debian: Security Advisory (DSA-5539-1)
2023-10-31 00:00:00
Debian: Security Advisory (DLA-3635-1)
2023-10-30 00:00:00
debian
debian
[SECURITY] [DLA 3635-1] node-browserify-sign security update
2023-10-29 04:33:32
[SECURITY] [DSA 5539-1] node-browserify-sign security update
2023-10-30 16:25:31
prion
prion
Out-of-bounds
2023-10-26 15:15:00
Code injection
2023-08-25 01:15:00
veracode
veracode
Improper Verification Of Cryptographic Signature
2023-10-27 08:50:35
Information Disclosure
2023-09-05 08:29:55
cve
cve
CVE-2023-46234
2023-10-26 15:15:09
ubuntucve
ubuntucve
CVE-2023-46234
2023-10-26 00:00:00
CVE-2023-40217
2023-08-25 00:00:00
ibm
ibm
nvd
nvd
CVE-2023-46234
2023-10-26 15:15:09
CVE-2023-40217
2023-08-25 01:15:09
alpinelinux
alpinelinux
CVE-2023-40217
2023-08-25 01:15:09
rocky
rocky
python3.11 security update
2023-10-06 22:57:49
python3 security update
2023-10-24 18:36:13
redhat
redhat
(RHSA-2023:5997) Important: python3 security update
2023-10-23 08:47:41
(RHSA-2023:5472) Important: python3.9 security update
2023-10-05 13:46:19
(RHSA-2023:5991) Important: python27:2.7 security update
2023-10-23 08:42:35
slackware
slackware
[slackware-security] python3
2023-09-15 19:55:45
almalinux
almalinux
Important: python3.9 security update
2023-10-05 00:00:00
Important: python39:3.9 and python39-devel:3.9 security update
2023-10-23 00:00:00
Important: python3.11 security update
2023-10-05 00:00:00
cgr
cgr
CVE-2023-40217 vulnerabilities
2024-05-19 03:07:16
oraclelinux
oraclelinux
python3.9 security update
2023-10-17 00:00:00
python3 security update
2023-10-24 00:00:00
python3 security update
2023-11-09 00:00:00
cloudlinux
cloudlinux
python: Fix of CVE-2023-40217
2024-01-12 17:18:46
amazon
amazon
Important: python38
2023-08-30 17:56:00
Important: python27
2023-10-30 23:31:00
Important: python3
2023-08-31 22:28:00
centos
centos
python, tkinter security update
2024-01-12 19:20:10
f5
f5
K000139685: Python vulnerability CVE-2023-40217
2024-05-21 00:00:00
freebsd
freebsd
Python -- multiple vulnerabilities
2023-08-22 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
35.1%
Related for RHSA-2023:6180